[Anima-bootstrap] Max: voucher terminology / explanations in next draft round

[Toerless Eckert <[e-mail]>]

Hi Max, *:

Wrt to the new text you are trying to work out for voucher terminology,
that is captured in todays notes on the etherpad:

I think that the voucher terminology will be confusing as long
as the name "audit" (voucher) implies the use of a public key (line 144
in etherpad), and the "ownership" (voucher) implies the use of
a certificate (via DN of certificate). audit vs. ownership are
just describing the type of assertion. Whether i want to use
public-key or Cert-DN is IMHO orthogonal (i think we already allow
that in the voucher draft), and it could help if we are also
clearer in the language.

Aka: 
  - classical anima voucher, call it:   public key audit voucher
  - classical netconf voucher, call it: certificate ownership voucher

  - Can i have a certificate audit voucher ? Absolutely!
  - Can i have a public key ownersip voucher ? Absolutely!
  - Can i have a certificate or public key  audit AND ownership voucher ?
    I think yes, but that would be icing on the cake.
    
Which IMHO leaves to explain the differences semantically:
- ownership vs. audit i think is simple
  - ownership: strong assertion by vendor. Can be pricy to support by vendor.
  - audit: lightweight assertion by vendor.

- certificate vs. public key
  - low end solutions may want to be lightweight and not rely fully
    on a certificate system. Just using public key is more lightweight.
  - Even if a system wants to use certificates, relying only on
    public key decouples enrolment from PKI. Aka: more modular design:
    use public key enrolment, and use normal PKI Cert enrolment afterwards
    (using the trust relationship established via the public key). This
    is the option that ANIMA chooses because EST already provides such
    a standalone enrolment method.
  - Including certificate in the voucher allows those vouchers to 
    lie around at an owner much longer. Their validity is as long as that
    of the included CA certificate (eg: >= 10 years). The validity of
    a public key is typically much shorter (eg: <= 1 year).
  - If vouchers are handled "offline" shipped via sneakernet/usb-sticks
    vendor->registrar in a solution where certificates are used (all
    the way into the pledge), certificate vouchers are the complete data
    needed. public key vouchers would require the certificate data to
    be encoded on the side too.

Hope all four are correct. Thats high level how i'd try to explain the
difference. Even if not correct, i hope it makes sense trying to figure
out these type of explanations of differences in the choices our voucher
solution offers.

Cheers
    Toerless